HIPAA Compliance Plan
« Previous PageMeaningful Use IndexNext Page »

Make sure you are Omnibus Rule Compliant: HIPAA Privacy Checklist.

§495.6 Meaningful use objectives and measures for EPs, eligible hospitals, and CAHs.

(a) Stage 1 criteria for EPs.

(1) General rule regarding Stage 1 criteria for meaningful use for EPs. Except as specified in paragraphs (a)(2) and (a)(3) of this section, EPs must meet all objectives and associated measures of the Stage 1 criteria specified in paragraph (d) of this section and five objectives of the EP‘s choice from paragraph (e) of this section to meet the definition of a meaningful EHR user.

(2) Exclusion for non-applicable objectives.

(i) An EP may exclude a particular objective contained in paragraphs (d) or (e) of this section, if the EP meets all of the following requirements:

(A) Must ensure that the objective in paragraph (d) or (e) of this section includes an option for the EP to attest that the objective is not applicable.

(B) Meets the criteria in the applicable objective that would permit the attestation.

(C) Attests.

(ii) An exclusion will reduce (by the number of exclusions applicable) the number of objectives that would otherwise apply. For example, an EP that has an exclusion from one of the objectives in paragraph (e) of this section must meet four (and not five) objectives of the EP‘s choice from such paragraph to meet the definition of a meaningful EHR user.

(3) Exception for Medicaid EPs who adopt, implement or upgrade in their first payment year. For Medicaid EPs who adopt, implement, or upgrade certified EHR technology in their first payment year, the meaningful use objectives and associated measures of the Stage 1 criteria specified in paragraphs (d) and (e) apply beginning with the second payment year, and do not apply to the first payment year.

(b) Stage 1 criteria for eligible hospitals and CAHs.

(1) General rule regarding Stage 1 criteria for meaningful use for eligible hospitals or CAHs. Except as specified in paragraphs (b)(2) and (b)(3) of this section, eligible hospitals and CAHs must meet all objectives and associated measures of the Stage 1 criteria specified in paragraph (f) of this section and five objectives of the eligible hospital‘s or CAH‘s choice from paragraph (g) of this section to meet the definition of a meaningful EHR user.

(2) Exclusions for nonapplicable objectives.

(i) An eligible hospital or CAH may exclude a particular objective that includes an option for exclusion contained in paragraphs (f) or

(g) of this section, if the hospital meets all of the following requirements:

(A) The hospital meets the criteria in the applicable objective that would permit an exclusion.

(B) The hospital so attests.

(ii) An exclusion will reduce (by the number of exclusions received) the number of objectives that would otherwise apply. For example, an eligible hospital that is excluded from one of the objectives in paragraph (g) of this section must meet four (and not five) objectives of the hospital‘s choice from such paragraph to meet the definition of a meaningful EHR user.

(3) Exception for Medicaid eligible hospitals that adopt, implement or upgrade in their first payment year. For Medicaid eligible hospitals that adopt, implement, or upgrade certified EHR technology in their first payment year, the meaningful use objectives and associated measures of the Stage 1 criteria specified in paragraphs (f) and (g) of this section apply beginning with the second payment year, and do not apply to the first payment year.

(c) Many of the objective and associated measures in paragraphs (d) through (g) of this section rely on measures that count unique patients or actions.

(1) If a measure (or associated objective) in paragraphs (d) through (g) of this section references paragraph (c) of this section, then the measure may be calculated by reviewing only the actions for patients whose records are maintained using certified EHR technology. A patient‘s record is maintained using certified EHR technology if sufficient data was entered in the certified EHR technology to allow the record to be saved, and not rejected due to incomplete data.

(2) If the objective and associated measure does not reference this paragraph (c) of this section, then the measure must be calculated by reviewing all patient records, not just those maintained using certified EHR technology.

(d) Stage 1 core criteria for EPs. An EP must satisfy the following objectives and associated measures, except those objectives and associated measures for which an EP qualifies for an exclusion under paragraph (a)(2) of this section specified in this paragraph :

(1)  (i) Objective. Use computerized provider order entry (CPOE) for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local and professional guidelines.

(ii) Measure. Subject to paragraph (c) of this section, more than 30 percent of all unique patients with at least one medication in their medication list seen by the EP have at least one medication order entered using CPOE.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(2)  (i) Objective. Implement drug-drug and drug-allergy interaction checks.

(ii) Measure. The EP has enabled this functionality for the entire EHR reporting period.

(3)  (i) Objective. Maintain an up-to-date problem list of current and active diagnoses.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry or an indication that no problems are known for the patient recorded as structured data.

(4)  (i) Objective. Generate and transmit permissible prescriptions electronically (eRx).

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all permissible prescriptions written by the EP are transmitted electronically using certified EHR technology.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(5)  (i) Objective. Maintain active medication list.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry (or an indication that the patient is not currently prescribed any medication) recorded as structured data.

(6)  (i) Objective. Maintain active medication allergy list.

(ii) Measure. More than 80 percent of all unique patients seen by the EP have at least one entry (or an indication that the patient has no known medication allergies) recorded as structured data.

(7)  (i) Objective. Record all of the following demographics:

(A) Preferred language.

(B) Gender.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(ii) Measure. More than 50 percent of all unique patients seen by the EP have demographics recorded as structured data.

(8)  (i) Objective. Record and chart changes in the following vital signs:

(A) Height.

(B) Weight.

(C) Blood pressure.

(D) Calculate and display body mass index (BMI).

(E) Plot and display growth charts for children 2 - 20 years, including BMI.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients age 2 and over seen by the EP, height, weight and blood pressure are recorded as structured data.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who either see no patients 2 years or older, or who believes that all three vital signs of height, weight, and blood pressure of their patients have no relevance to their scope of practice.

(9)  (i) Objective. Record smoking status for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 13 years old or older seen by the EP have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who sees no patients 13 years or older.

(10)  (i) Objective. Report ambulatory clinical quality measures to CMS or, in the case of Medicaid EPs, the States.

(ii) Measure. Subject to paragraph (c) of this section, successfully report to CMS (or, in the case of Medicaid EPs, the States) ambulatory clinical quality measures selected by CMS in the manner specified by CMS (or in the case of Medicaid EPs, the States).

(11)  (i) Objective. Implement one clinical decision support rules relevant to specialty or high clinical priority along with the ability to track compliance with that rule.

(ii) Measure. Implement one clinical decision support rule.

(12)  (i) Objective. Provide patients with an electronic copy of their health information (including diagnostics test results, problem list, medication lists, medication allergies) upon request.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all patients who request an electronic copy of their health information are provided it within 3 business days.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP that has no requests from patients or their agents for an electronic copy of patient health information during the EHR reporting period.

(13)  (i) Objective. Provide clinical summaries for patients for each office visit.

(ii) Measure. Subject to paragraph (c) of this section, clinical summaries provided to patients for more than 50 percent of all office visits within 3 business days.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP who has no office visits during the EHR reporting period.

(14)  (i) Objective. Capability to exchange key clinical information (for example, problem list, medication list, allergies, and diagnostic test results), among providers of care and patient authorized entities electronically.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to electronically exchange key clinical information.

(15)  (i) Objective. Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities.

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308(a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process.

(e) Stage 1 menu set criteria for EPs. An EP must meet five of the following objectives and associated measures, one of which must be either paragraph (e)(9) or (e)(10) of this section, except that the required number of objectives and associated measures is reduced by an EP‘s paragraph (a)(2) of this section exclusions specified in this paragraph:

(1)  (i) Objective. Implement drug-formulary checks.

(ii) Measure. The EP has enabled this functionality and has access to at least one internal or external formulary for the entire EHR reporting period.

(2)  (i) Objective. Incorporate clinical lab-test results into EHR as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all clinical lab tests results ordered by the EP during the EHR reporting period whose results are either in a positive/negative or numerical format are incorporated in certified EHR technology as structured data.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who orders no lab tests whose results are either in a positive/negative or numeric format during the EHR reporting period.

(3)  (i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach.

(ii) Measure. Subject to paragraph (c) of this section, generate at least one report listing patients of the EP with a specific condition.

(4)  (i) Objective. Send reminders to patients per patient preference for preventive/followup care.

(ii) Measure. Subject to paragraph (c) of this section, more than 20 percent of all patients 65 years or older or 5 years old or younger were sent an appropriate reminder during the EHR reporting period.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who has no patients 65 years old or older or 5 years old or younger with records maintained using certified EHR technology.

(5)  (i) Objective. Provide patients with timely electronic access to their health information (including lab results, problem list, medication lists, and allergies) within 4 business days of the information being available to the EP.

(ii) Measure. At least 10 percent of all unique patients seen by the EP are provided timely (available to the patient within four business days of being updated in the certified EHR technology) electronic access to their health information subject to the EP‘s discretion to withhold certain information.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. Any EP that neither orders nor creates any of the information listed at 45 CFR 170.304(g) during the EHR reporting period.

(6)  (i) Objective. Use certified EHR technology to identify patient-specific education resources and provide those resources to the patient if appropriate.

(ii) Measure. More than 10 percent of all unique patients seen by the EP are provided patient-specific education resources.

(7)  (i) Objective. The EP who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the EP performs medication reconciliation for more than 50 percent of transitions of care in which the patient is transitioned into the care of the EP.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who was not the recipient of any transitions of care during the EHR reporting period.

(8)  (i) Objective. The EP who transitions their patient to another setting of care or provider of care or refers their patient to another provider of care should provide summary care record for each transition of care or referral.

(ii) Measure. Subject to paragraph (c) of this section, the EP who transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals.

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who neither transfers a patient to another setting nor refers a patient to another provider during the EHR reporting period.

(9)  (i) Objective. Capability to submit electronic data to immunization registries or immunization information systems and actual submission according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to submit electronic data to immunization registries and follow up submission if the test is successful (unless none of the immunization registries to which the EP submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who administers no immunizations during the EHR reporting period or where no immunization registry has the capacity to receive the information electronically.

(10)  (i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies and actual submission according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to provide electronic syndromic surveillance data to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an EP submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. An EP who does not collect any reportable syndromic information on their patients during the EHR reporting period or does not submit such information to any public health agency that has the capacity to receive the information electronically.

(f) Stage 1 core criteria for eligible hospitals or CAHs. An eligible hospital or CAH must meet the following objectives and associated measures except those objectives and associated measures for which an eligible hospital or CAH qualifies for a paragraph (b)(2) of this section exclusion specified in this paragraph:

(1)  (i) Objective. Use CPOE for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per State, local, and professional guidelines.

(ii) Measure. Subject to paragraph (c) of this section, more than 30 percent of all unique patients with at least one medication in their medication list admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) have at least one medication order entered using CPOE.

(2)  (i) Objective. Implement drug-drug and drug-allergy interaction checks.

(ii) Measure. The eligible hospital or CAH has enabled this functionality for the entire EHR reporting period.

(3)  (i) Objective. Maintain an up-to-date problem list of current and active diagnoses.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) have at least one entry or an indication that no problems are known for the patient recorded as structured data.

(4)  (i) Objective. Maintain active medication list.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) have at least one entry (or an indication that the patient is not currently prescribed any medication) recorded as structured data.

(5)  (i) Objective. Maintain active medication allergy list.

(ii) Measure. More than 80 percent of all unique patients admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) have at least one entry (or an indication that the patient has no known medication allergies) recorded as structured data.

(6)  (i) Objective. Record all of the following demographics;

(A) Preferred language.

(B) Gender.

(C) Race.

(D) Ethnicity.

(E) Date of birth.

(F) Date and preliminary cause of death in the event of mortality in the eligible hospital or CAH.

(ii) Measure. More than 50 percent of all unique patients admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) have demographics recorded as structured data.

(7)  (i) Objective. Record and chart changes in the following vital signs:

(A) Height.

(B) Weight.

(C) Blood pressure.

(D) Calculate and display body mass index (BMI).

(E) Plot and display growth charts for children 2 - 20 years, including BMI.

(ii) Measure. Subject to paragraph (c) of this section, for more than 50 percent of all unique patients age 2 and over admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23), height, weight, and blood pressure are recorded as structured data.

(8)  (i) Objective. Record smoking for patients 13 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 13 years old or older or admitted to the eligible hospital‘s inpatient or emergency department (POS 21 or 23) have smoking status recorded as structured data.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. Any eligible hospital or CAH that admits no patients 13 years or older to their inpatient or emergency department (POS 21 or 23).

(9)  (i) Objective. Report hospital clinical quality measures to CMS or, in the case of Medicaid eligible hospitals, the States.

(ii) Measure. Subject to paragraph (c) of this section, successfully report to CMS (or, in the case of Medicaid eligible hospitals or CAHs, the States) hospital clinical quality measures selected by CMS in the manner specified by CMS (or, in the case of Medicaid eligible hospitals or CAHs, the States).

(10)  (i) Objective. Implement one clinical decision support rule related to a high priority hospital condition along with the ability to track compliance with that rule.

(ii) Measure. Implement one clinical decision support rule.

(11)  (i) Objective. Provide patients with an electronic copy of their health information (including diagnostic test results, problem list, medication lists, medication allergies, discharge summary, procedures), upon request.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all patients of the inpatient or emergency departments of the eligible hospital or CAH (POS 21 or 23) who request an electronic copy of their health information are provided it within 3 business days.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. Any eligible hospital or CAH that has no requests from patients or their agents for an electronic copy of patient health information during the EHR reporting period.

(12)  (i) Objective. Provide patients with an electronic copy of their discharge instructions at time of discharge, upon request.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all patients who are discharged from an eligible hospital or CAH‘s inpatient or emergency department (POS 21 or 23) and who request an electronic copy of their discharge instructions are provided it.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. Any eligible hospital or CAH that has no requests from patients or their agents for an electronic copy of the discharge instructions during the EHR reporting period.

(13)  (i) Objective. Capability to exchange key clinical information (for example, problem list, medication list, medication allergies, and diagnostic test results), among providers of care and patient authorized entities electronically.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to electronically exchange key clinical information.

(14)  (i) Objective. Protect electronic health information created or maintained by the certified EHR technology through the implementation of appropriate technical capabilities

(ii) Measure. Conduct or review a security risk analysis in accordance with the requirements under 45 CFR 164.308 (a)(1) and implement security updates as necessary and correct identified security deficiencies as part of its risk management process.

(g) Stage 1 menu set criteria for eligible hospitals or CAHs. Eligible hospitals or CAHs must meet five of the following objectives and associated measures, one which must be specified in paragraph (g)(8), (g)(9), or (g)(10) of this section, except that the required number of objectives and associated measures is reduced by a hospital‘s paragraph (b)(2) of this section exclusions specified in this paragraph:

(1)  (i) Objective. Implement drug-formulary checks.

(ii) Measure. The eligible hospital or CAH has enabled this functionality and has access to at least one internal or external formulary for the entire EHR reporting period.

(2)  (i) Objective. Record advance directives for patient 65 years old or older.

(ii) Measure. Subject to paragraph (c) of this section, more than 50 percent of all unique patients 65 years old or older admitted to the eligible hospital‘s or CAH‘s inpatient (POS 21) have an indication of an advance directive status recorded as structured data.

(iii) Exclusion in accordance with paragraph (b)(2) of this section. An eligible hospital or CAH that admits no patients age 65 years old or older during the EHR reporting period.

(3)  (i) Objective. Incorporate clinical lab-test results into EHR as structured data.

(ii) Measure. Subject to paragraph (c) of this section, more than 40 percent of all clinical lab tests results ordered by an authorized provider of the eligible hospital or CAH for patients admitted to its inpatient or emergency department (POS 21 and 23) during the EHR reporting period whose results are either in a positive/negative or numerical format are incorporated in certified EHR technology as structured data.

(4)  (i) Objective. Generate lists of patients by specific conditions to use for quality improvement, reduction of disparities, research, or outreach.

(ii) Measure. Subject to paragraph (c) of this section, generate at least one report listing patients of the eligible hospital or CAH with a specific condition.

(5)  (i) Objective. Use certified EHR technology to identify patient-specific education resources and provide those resources to the patient if appropriate.

(ii) Measure. More than 10 percent of all unique patients admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23) are provided patientspecific education resources.

(6)  (i) Objective. The eligible hospital or CAH who receives a patient from another setting of care or provider of care or believes an encounter is relevant should perform medication reconciliation.

(ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH performs medication reconciliation for more than 50 percent of transitions of care in which the patient is admitted to the eligible hospital‘s or CAH‘s inpatient or emergency department (POS 21 or 23).

(7)  (i) Objective. The eligible hospital or CAH that transitions their patient to another setting of care or provider of care or refers their patient to another provider of care should provide summary care record for each transition of care or referral.

(ii) Measure. Subject to paragraph (c) of this section, the eligible hospital or CAH that transitions or refers their patient to another setting of care or provider of care provides a summary of care record for more than 50 percent of transitions of care and referrals.

(8)  (i) Objective. Capability to submit electronic data to immunization registries or immunization information systems and actual submission according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to submit electronic data to immunization registries and follow up submission if the test is successful (unless none of the immunization registries to which the eligible hospital or CAH submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (b)(2) of this section. An eligible hospital or CAH that administers no immunizations during the EHR reporting period or where no immunization registry has the capacity to receive the information electronically.

(9)  (i) Objective. Capability to submit electronic data on reportable (as required by State or local law) lab results to public health agencies and actual submission according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology‘s capacity to provide electronic submission of reportable lab results to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an eligible hospital or CAH submits such information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (b)(2) of this section. No public health agency to which the eligible hospital or CAH submits such information has the capacity to receive the information electronically.

(10)  (i) Objective. Capability to submit electronic syndromic surveillance data to public health agencies and actual submission according to applicable law and practice.

(ii) Measure. Performed at least one test of certified EHR technology’s capacity to provide electronic syndromic surveillance data to public health agencies and follow-up submission if the test is successful (unless none of the public health agencies to which an eligible hospital or CAH submits information has the capacity to receive the information electronically).

(iii) Exclusion in accordance with paragraph (a)(2) of this section. No public health agency to which the eligible hospital or CAH submits information has the capacity to receive the information electronically.

(h) Stage 2 criteria for EPs. Beginning when final regulations for Stage 2 are effective, an EP must satisfy the following objectives and associated measures:

(1)  (i) Objective. Use computerized provider order entry (CPOE) for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local and professional guidelines.

(ii) Measure. More than 60 percent of all unique patients with at least one medication in their medication list seen by the EP have at least one medication order entered using CPOE.

(iii) Exclusion. Any EP who writes fewer than 100 prescriptions during the EHR reporting period.

(2) [Reserved].

(i) Stage 2 criteria for eligible hospitals or CAHs. Beginning when final regulations for Stage 2 are effective, an eligible hospital or CAH must satisfy the following objectives and associated measures:

(1)  (i) Objective. Use computerized provider order entry (CPOE) for medication orders directly entered by any licensed healthcare professional who can enter orders into the medical record per state, local and professional guidelines.

(ii) Measure. More than 60 percent of all unique patients with at least one medication in their medication list admitted to the eligible hospital’s or CAH’s inpatient or emergency department (POS 21 or 23) have at least one medication order entered using CPOE.

(2) [Reserved].

Download a FREE copy of the HIPAA Survival Guide 4th Edition.

« Previous PageMeaningful Use IndexNext Page »